nerdexam
CrowdStrike

CCFR-201B · Question #7

The Process Activity View provides a rows-and-columns style view of the events generated in a detection. Why might this be helpful?

The correct answer is A. The Process Activity View creates a consolidated view of all detection events for that process that. You've hit your limit · resets 12:50am (America/New_York)

Detection Investigation and Triage

Question

The Process Activity View provides a rows-and-columns style view of the events generated in a detection. Why might this be helpful?

Options

  • AThe Process Activity View creates a consolidated view of all detection events for that process that
  • BThe Process Activity View will show the Detection time of the earliest recorded activity which
  • CThe Process Activity View only creates a summary of Dynamic Link Libraries (DLLs) loaded by a
  • DThe Process Activity View creates a count of event types only, which can be useful when scoping

How the community answered

(29 responses)
  • A
    93% (27)
  • B
    3% (1)
  • C
    3% (1)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#Process Activity View#detection events#event analysis#process investigation

Community Discussion

No community discussion yet for this question.

Full CCFR-201B Practice